11/15

Exchange Exploit Leads to Domain Wide Ransomware

https://thedfirreport.com/2021/11/15/exchange-exploit-leads-to-domain-wide-ransomware/
Exchange Exploit Leads to Domain Wide Ransomware

Guess who’s back – cyber.wtf

https://cyber.wtf/2021/11/15/guess-whos-back/
Guess who’s back – cyber.wtf

WINHELLO2hashcat

https://hashcat.net/forum/thread-10461.html
WINHELLO2hashcat

LOLBAS

https://lolbas-project.github.io/
LOLBAS

North Korean Hackers Target Cybersecurity Researchers with Trojanized IDA Pro

https://thehackernews.com/2021/11/north-korean-hackers-target.html
North Korean Hackers Target Cybersecurity Researchers with Trojanized IDA Pro

Taking the pain out of C2 infrastructure (Part 2)

https://byt3bl33d3r.substack.com/p/taking-the-pain-out-of-c2-infrastructure-3c4?r=jt535&utm_campaign=post&utm_medium=web&utm_source=
Taking the pain out of C2 infrastructure (Part 2)

Telegram: Contact @sickcodeschat

https://t.me/sickcodeschat
Telegram: Contact @sickcodeschat

Feodo Tracker | Browse Botnet C&Cs

https://feodotracker.abuse.ch/browse/emotet/
Feodo Tracker | Browse Botnet C&Cs

GitHub - RUB-SysSec/nyx-net

https://github.com/RUB-SysSec/nyx-net
GitHub - RUB-SysSec/nyx-net

Tweet / Twitter

https://twitter.com/TomWRollins/status/1460159590981672962
Tweet / Twitter

RCE in Concrete CMS

https://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-concrete-cms-part1-rce/
RCE in Concrete CMS

https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt

https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt

Emotet malware is back and rebuilding its botnet via TrickBot

https://www.bleepingcomputer.com/news/security/the-emotet-malware-is-back-and-rebuilding-the-botnet-via-trickbot/
Emotet malware is back and rebuilding its botnet via TrickBot

FBI system hacked to email 'urgent' warning about fake cyberattacks

https://www.bleepingcomputer.com/news/security/fbi-system-hacked-to-email-urgent-warning-about-fake-cyberattacks/
FBI system hacked to email 'urgent' warning about fake cyberattacks

New Moses Staff group targets Israeli organizations in destructive attacks

https://therecord.media/new-moses-staff-group-targets-israeli-organizations-in-destructive-attacks/
New Moses Staff group targets Israeli organizations in destructive attacks

POC2021 – Pwning the Windows 10 Kernel with NTFS and WNF Slides | NCC Group Research Blog | Making the world safer and more secure

https://research.nccgroup.com/2021/11/15/poc2021-pwning-the-windows-10-kernel-with-nfts-and-wnf-slides/
POC2021 – Pwning the Windows 10 Kernel with NTFS and WNF Slides | NCC Group Research Blog | Making the world safer and more secure

Malware-IOCs/2021-11-15 Emotet IOCs at main · executemalware/Malware-IOCs · GitHub

https://github.com/executemalware/Malware-IOCs/blob/main/2021-11-15%20Emotet%20IOCs
Malware-IOCs/2021-11-15 Emotet IOCs at main · executemalware/Malware-IOCs · GitHub

WISP - OffensiveCon Berlin Scholarship Application

https://forms.gle/PSvLUNoxxJ4qFLPv7
WISP - OffensiveCon Berlin Scholarship Application

Uncovering MosesStaff techniques: Ideology over Money - Check Point Research

https://research.checkpoint.com/2021/mosesstaff-targeting-israeli-companies/
Uncovering MosesStaff techniques: Ideology over Money - Check Point Research

FBI's Email System Hacked to Send Out Fake Cyber Security Alert to Thousands

https://thehackernews.com/2021/11/fbis-email-system-hacked-to-send-out.html
FBI's Email System Hacked to Send Out Fake Cyber Security Alert to Thousands

Feodo Tracker | Browse Botnet C&Cs

https://feodotracker.abuse.ch/browse/dridex/
Feodo Tracker | Browse Botnet C&Cs

DHS Cybersecurity Service | Homeland Security

http://DHS.gov/cybersecurityservice
DHS Cybersecurity Service | Homeland Security

Full article: On the strategic consequences of digital espionage

https://www.tandfonline.com/doi/full/10.1080/23738871.2021.2000628
Full article: On the strategic consequences of digital espionage

Blacksmith - Computer Security Group

https://comsec.ethz.ch/research/dram/blacksmith/
Blacksmith - Computer Security Group

Golden Certificate – Penetration Testing Lab

https://pentestlab.blog/2021/11/15/golden-certificate/
Golden Certificate – Penetration Testing Lab